Cisco Cisco Certifications 210-250 Questions & Answers

• Question 901:

  Which of the following is not a defense against a traffic substitution and insertion attack?

  A. Unicode de-obfuscation

  B. Using Unicode instead of ASCII

  C. Adopting the format changes

  D. Properly processing extended characters

  Correct Answer: B

• Question 902:

  What type of attack is done when the attacker tries to create rogue access points so as to gain access to the network or steal information?

  A. SSID injection

  B. Evil twin

  C. War driving

  D. LWAP injection

  Correct Answer: B

• Question 903:

  Which of the following is an attack where threat actors can attack hosts, switches, and routers connected to your Layer 2 network by poisoning the ARP caches of systems connected to the subnet and by intercepting traffic intended for other hosts on the subnet?

  A. ARP cache injection

  B. ARP cache poisoning

  C. DHCP snooping

  D. ARP snooping

  Correct Answer: B

• Question 904:

  Cisco switches support a feature that validates ARP packets and intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. What is this feature called?

  A. DHCP cache snooping

  B. ARP cache poisoning

  C. ARP cache snooping

  D. Dynamic ARP inspection

  Correct Answer: D

• Question 905:

  Which of the following is when the attacker sends traffic slower than normal, not exceeding thresholds inside the time windows the signatures use to correlate different packets together?

  A. Traffic insertion

  B. Protocol manipulation

  C. Traffic fragmentation

  D. Timing attack

  Correct Answer: D

• Question 906:

  Which of the following would give an IPS the most trouble?

  A. Jumbo packets

  B. Encryption

  C. Throughput

  D. Updates

  Correct Answer: B

• Question 907:

  Which type of attack is when an IPS receives a lot of traffic/packets?

  A. Resource exhaustion

  B. DoS (denial of service)

  C. Smoke and mirrors

  D. Timing attack

  Correct Answer: A

• Question 908:

  Which of the following is a methodology used by attackers to find wireless access points wherever they may be?

  A. War driving

  B. Wireless LWAP scanning

  C. Wireless driving

  D. Wireless Aironet scanning

  Correct Answer: A

• Question 909:

  Which of the following is a type of web application vulnerability where malicious scripts are injected into legitimate and trusted websites?

  A. Buffer overflow

  B. Cross-site scripting (XSS)

  C. Cross-site injection (XSI)

  D. SQL injection

  Correct Answer: B

• Question 910:

  Which of the following is a type of vulnerability that attackers can exploit to read sensitive data from the database, modify or delete database data, execute administration operations on the database, and even issue commands to the operating system?

  A. SQL injection

  B. SQL buffer overflow

  C. SQL drop

  D. SQL bomb

  Correct Answer: A